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Top Stories 

• Utility crews worked to restore power to 29,000 customers that remained without service in 
Spokane County November 23 while public schools remained closed through November 27 
following a November 17 winter storm. - Associated Press (See item 1 ) 

• The U.S. Department of State issued a worldwide travel alert November 23 through 
February 24 citing increased threats from militant groups, and urged the public to remain 
vigilant and ware of surroundings during travel. - Reuters (See item 9 ) 

• Highway 42 in Clayton was shut down between Glen Laurel and Castleberry Road for 
approximately 14 hours November 23 - November 24 after crews hit an 8-inch 
underground gas line in the area that caused a gas leak. - WTVD 11 Durham (See item 10 ) 

• The U.S. Centers for Disease Control and Prevention are investigating cases of E.coli 
illnesses linked to Costco Wholesale chicken salad products in Colorado, Montana, Utah, 
and Washington November 23. - Associated Press (See item 18 ) 
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Energy Sector 



1. November 23, Associated Press - (Washington) Tens of thousands in Washington 
state shiver without power. Utility crews worked to restore power to 29,000 
customers that remained without service in Spokane County November 23 following a 
November 17 winter storm that downed power poles and trees, and knocked out power 
to 180,000 customers. Public schools were closed through November 27 due to the 
outage and debris that blocked sidewalks. 

Source: http://www.theolvmpian.com/news/state/washington/article46036540.html 

2. November 23, Pennsylvania Department of Environmental Protection - (Pennsylvania) 

DEP fines Chesapeake Appalachia $1.4 million for stream impacts caused by well 
pad landslide. Chesapeake Appalachia, LLC will pay a $1.4 million fine in a 
settlement reached November 23 with the Pennsylvania Department of Environmental 
Protection resolving violations of the State’s Oil and Gas Act, Clean Streams Law, and 
Dams Safety and Encroachments Act following a September 2011 landslide that 
occurred at the Stinger 8H gas well in Aleppo Township, Greene County, which 
effected several tributaries of Harts Run. 

Source: 

http ://w w w .ahs .dep .pa. gov/NewsRoomPublic/articleviewer. aspx?id=208 80&typeid= 1 

3. November 22, Associated Press - (South Dakota) Glacial Lakes Energy planning 
upgrades in Mina, Watertown. Glacial Lakes Energy announced November 22 that it 
will spend $23 million to upgrade its ethanol production facilities in Mina and 
Watertown, which will include improvements to help put out more ethanol without 
processing additional corn, and improvements to the unit train capability to add 
additional ethanol storage. 

Source: http://www.argusleader.com/storv/news/2015/ll/22/glacial-lakes-energv- 
planning-upgrades-mina-watertown/76223052/ 

Chemical Industry Sector 

Nothing to report 

Nuclear Reactors, Materials, and Waste Sector 

4. November 23, Morris Herald-News - (Illinois) Dresden Station Unit 2 returned to 
service after planned refueling. Officials from Dresden Generating Station reported 
November 23 that its Unit 2 reactor returned to full power operations November 22 
following a 19-day refueling and maintenance outage that replaced and updated 
equipment and ensured the plant used the most up-to-date technology. 

Source: http://www.morrisherald-news.com/2015/ll/23/dresden-station-unit-2- 
returned-to-service-after-planned-refueling/aogxu7v/ 

5. November 23, Kalamazoo Gazette - (Michigan) Palisades Nuclear Plant receives 
license amendments; NRC says plant is safe. The U.S. Nuclear Regulatory 
Commission issued 2 license amendments November 23 for embrittlement after an 
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investigation at Entergy-owned Palisades Power Plant revealed its Covert Township 
facility did not pose a health and safety threat to the public and also demonstrated 
proper safety operations. 

Source: http://www.mlive.com/news/kalamazoo/index.ssf/2015/ll/palisades 2.html 

Critical Manufacturing Sector 

6. November 23, U.S. Department of Labor - (Ohio) Power press operator loses 3 
fingers at Akron metal stamping plant. The Occupational Safety and Health 
Administration cited Ohio Gasket & Shim Company, a metal stamping facility in 
A kr on November 19, for 1 willful and 12 serious safety violations for failing to install 
safety guards, failing to test and inspect machine safety procedures, and failing to 
supervise a mechanical power press after the machine struck an employee who lost 3 
fingers. Proposed fines total $103,600. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=29070 

7. November 23, Associated Press - (Illinois) Granite City steel mill shut down. 
Officials from U.S. Steel reported November 23 that the company will idle its 
operations and indefinitely lay off 2,000 workers at its Granite City Works facility in 
Illinois due to the state of the global and oil markets including reduced oil rig counts 
and imports and depressed steel prices. 

Source: http://stlouis.cbslocal.eom/2015/l 1/23/granite-city-steel-mill-shut-down/ 

Defense Industrial Base Sector 

Nothing to report 

Financial Services Sector 

8. November 24, Softpedia - (International) ModPOS is a sophisticated criminal 
malware framework targeting POS devices. Security specialists from iSIGHT 
Partners discovered November 24 a new complex form of malware called ModPOS 
that targets U.S. retailers’ point-of-sale (PoS) systems via its three modules including 
Uploader/Downloader, Keylogger, and POS Scrapper that use obfuscation and 
encryption to evade security software and use its command and control (C&C) server to 
instruct the infected device to fetch other modules, once the stolen information is 
deemed valuable. 

Source: http://news.softpedia.com/news/modpos-is-a-sophisticated-criminal-malware- 
framework-targeting-pos-devices-496643.shtml 

For another story, see item 35 

Transportation Systems Sector 

9. November 24, Reuters - (International) U.S. issues global travel alert as manhunt 
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continues for Paris attackers. The U.S. Department of State issued a worldwide travel 
alert November 23 through February 24 citing increased threats from militant groups, 
and urged the public to remain vigilant and aware of surroundings during travel. 

Source: http://www.reuters.com/article/2015/ll/24/us-france-shooting-belgium- 



idUSKCN0TA03H20151124 



10. November 24, WTVD 11 Durham - (North Carolina) NC-42 reopen after major gas 
leak in Clayton. Highway 42 in Clayton was shut down between Glen Laurel and 
Castleberry Road for approximately 14 hours November 23 - November 24 after crews 
hit an 8-inch underground gas line in the area that caused a gas leak. 

Source: http://abcll.com/traffic/nc-42-shut-down-in-clayton-due-to-maior-gas- 
leak/ 10963 12/ 

11. November 24, Oshkosh Northwestern - (Illinois) Tractor crash closes 1-41, woman 
injured. Southbound lanes of Interstate Highway 41 in Winnebago County were closed 
for approximately 5 hours November 23 while crews cleared debris following an 
accident involving 2 vehicles that sent 1 driver to the hospital with non-life-threatening 
injuries. 

Source: http://www.thenorthwestern.eom/storv/news/local/oshkosh/2015/l 1/24/tractor- 
crash-closes— 4 1 - woman-inj ured/7 630 1 936/ 

12. November 24, Associated Press - (California) Metro Blue Line tracks remain shut 
following train - car crash. Metro Blue Line tracks in the Compton and Willowbrook 
areas were closed at least through November 24 following a November 23 accident 
involving a vehicle and a train that left 1 person injured and caused damage to the 
tracks and rail system. 

Source: http://www.mercurynews.com/ci 29159530/metro-blue-line-tracks-remain- 
shut-following-train 

13. November 24, WWLP 22 Springfield - (Massachusetts) Train derailment in West 
Springfield; bridge re-opened. The Vietnam Veterans Memorial Bridge between 
West Springfield and Agawam was closed for 3 hours November 24 after 5 train cars 
from a CSX Transportation train derailed near West Springfield. 

Source: http://wwlp.com/2015/ll/24/strathmore-bridge-closed-due-to-train-derailment/ 

14. November 23, Elmira Star-Gazette - (New York) One dead after 1-86 crash. 
Eastbound lanes of Interstate 86 east of Elmira were shut down for several hours 
November 23 while officials investigated the scene of a 2-vehicle crash that left 1 
driver dead and a second driver injured. 

Source: http://www.stargazette.com/story/news/2015/ll/23/one-dead-after— 86- 
crash/76295456/ 

15. November 23, Fort Worth Star-Telegram - (Texas) Man killed in Fort Worth I-35W 
wreck identified, 4 injured. One person was killed and 4 others were injured 
following a multi- vehicle accident involving 2 semi-trucks and 3 vehicles on Interstate 
35 West in north Fort Worth that shut down southbound lanes for more than 3 hours 
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November 23. 

Source: http://www.star-telegram.com/news/local/comrnunity/fort- 
worth/article46042830.html 



16. November 23, KARE 11 Minneapolis - (Minnesota) Fatal crash closes Hwy 212 in 
Chaska for nearly 5 hours. All eastbound lanes and all but 1 westbound lane of 
Highway 212 in Chaska were shut down for nearly 4 hours November 23 following a 
crash involving 2 vehicles that left 1 person dead and a second person injured. 

Source: http://www.kare! 1 .com/story/traffic/2015/1 l/23/serious-crash-closes-hwy-212- 
in-chaska/7 625 1186/ 



17. November 23, Topeka Capital- Journal - (Kansas) US-75 highway in Jackson County 
re-opened Monday evening following afternoon rollover. Northbound and 
southbound lanes of U.S. 75 Highway in Jackson County were closed for more than 6 
hours November 23 while crews cleared the scene following a 2-vehicle crash that left 
1 person injured. 

Source: http://cionline.com/news/2015-ll-23/us-75-highwav-iackson-county-re- 
opened-monday-evening-following-aftemoon-rollover 

For another story, see item 3 

Food and Agriculture Sector 

18. November 23, Associated Press - (National) Costco pulls chicken salad off shelves 
due to E. coli. The Washington State Department of Health reported November 23 that 
at least one case of E. coli in King County was linked to chicken salad purchased at 
Costco Wholesale Corporation stores after a person fell ill from consuming the product. 
The U.S. Centers for Disease Control and Prevention reported that Colorado, Montana, 
and Utah have also confirmed E. coli cases linked to the product. 

Source: http://www.king5.com/storv/news/local/2015/ll/23/costco-pulls-chicken- 
salad-off-shelves-due-to-e-coli/76295426/ 



19. November 23, Pottstown Mercury - (Pennsylvania) Spotted Lanternfly quarantine 
spreads in Berks, Montco. The Pennsylvania Department of Agriculture issued a 
limited movement quarantine November 18 fori 5 municipalities in Berks and 
Montgomery counties due to sightings of the invasive Spotted Lanternfly. Department 
officials reported that the invasive pest has the potential to damage the viticulture 
(grape), tree fruit, plant nursery, and timber industries. 

Source: http://www.pottsmerc.com/environment-and-nature/20151123/spotted- 
lantemflv-quarantine-spreads-in-berks-montco 

For another story, see item 3 

Water and Wastewater Systems Sector 

20. November 23, Baltimore Sun - (Maryland) 55,400 gallons of untreated wastewater 
floods into stream near Morgan State. Approximately 55,400 gallons of untreated 
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wastewater flooded into Herring Run Stream in Baltimore near Morgan State 
University following a sewer main break November 18 that lasted through November 
21. City officials posted warning signs along the stream. 

Source: http://www.baltimoresun.com/features/green/blog/bs-md-ci-herring-run- 
sewage-2015 1 123-story.html 

For another story, see item 2 

Healthcare and Public Health Sector 

21. November 23, U.S. Department of Labor - (New Jersey) United Hospital Supply 
Corp. exposes employees to repeat safety and health hazards at manufacturing 
facility in Burlington, New Jersey. The Occupational Safety and Health 
Administration announced November 23 that United Hospital Supply Corp., was issued 
1 willful, 10 repeat, 9 serious, and 1 other- than-serious citations November 19 
following a May 27 investigation that found welding, electrical, and unguarded 
machinery hazards at the company’s manufacturing facility in Burlington, New Jersey. 
Proposed penalties total $181,500. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=29073 

Government Facilities Sector 

22. November 24, ArmyTimes.com - (Texas) Four Army aviators killed in Black Hawk 
crash on Fort Hood. Fort Hood officials reported November 24 that four U.S. Army 
aviators were killed during a routine training mission when a UH-60 Black Hawk 
crashed November 23 in the northeast portion of the Fort Hood Range. The cause of the 
crash is under investigation. 

Source: http://www.armvtimes.com/storv/militarv/2015/ll/24/four-army-aviators- 
killed-black-hawk-crash-fort-hood/76300606/ 

23. November 23, WKYT 27 Lexington - (Kentucky) Knox County Public Schools closed 
Tuesday. Knox County Public Schools in Kentucky were closed November 24 
following November 23 and November 20 bomb threats at Knox Central High School 
that prompted the evacuation of the school and early dismissal. Police searched the 
campus and deemed it safe once nothing suspicious was found. 

Source: http://www.wkvt.com/home/headlines/Knox-County-Public-Schools-dismiss- 
after-bomb-threat-35305368 1 .html 

24. November 23, Homeland Security News Wire; The Register - (National) DHS runs 
many unsecured databases: IG. The DHS Inspector General released a report 
November 13 that found several vulnerabilities in DHS databases due to unpatched 
systems, including classified networks that could potentially allow an attacker to 
exploit the vulnerabilities and gain access into data. The report also found that the 
agency did not include classified system information on its monthly scorecard, in 
addition to inaccurate or incomplete information in management systems, among other 
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security gaps. 

Source: http://www.homelandsecuritynewswire.com/dr20151 123-dhs-runs-many- 
unsecured-databases-ig 

25. November 23, WZZM 13 Grand Rapids - (Michigan) MCC classes canceled after 
bomb threat. Administrators cancelled classes at all Muskegon Community College 
campuses in Muskegon November 23 following the discovery of a written bomb threat 
in the Grand Haven Community Center. Police cleared the scene after spending several 
hours searching for anything suspicious and classes were scheduled to resume 
November 24. 

Source: http://www.wzzml3.eom/storv/news/local/muskegon/2015/l 1/23/mcc- 
campuses-evacuated-due-to-bomb-threat/76251674/ 

For another story, see item 1 

Emergency Services Sector 

26. November 23, The Jackson Sun - (Tennessee) 16 inmates involved in jail 
disturbance, vandalism. The Madison County Sheriffs Office reported November 23 
that 16 inmates were involved in a disturbance at J. Alexander Leech Criminal Justice 
Complex November 21, where the inmates damaged cell areas, broke windows, and 
caused damage to telephones and sprinkler heads. A portion of the jail was placed on 
lockdown and officials are assessing the total cost of damages. 

Source: http://www.iacksonsun.com/storv/news/crime/2015/ll/23/16-inrnates- 
involved-in-iail-disturbance/76280608/ 

27. November 23, WIFR 23 Freeport - (Illinois) Jo Daviess County Sheriff’s Office 
reporting 911 outage. Emergency 9-1-1 service in Stockton, Warren, Elizabeth, 
Hanover, Scales Mound, Apple River, and Apple Canyon Lake areas in Jo Daviess 
County was down November 23, and residents were urged to contact the sheriffs 
office or dial 9-1-1 from a cell phone in case of an emergency. Officials reported that 
there was no timeline for the restoration of services. 

Source: http://www.wifr.com/home/headlines/Jo-Daviess-County-Sheriffs-Office- 
353056731.html 

Information Technology Sector 

28. November 24, Securityweek - (International) Lenovo patches privilege escalation 
flaws in system update. Lenovo released a new version of its System Update software 
addressing a security flaw, including a local unprivileged vulnerability, in which an 
attacker can gain administrative privileges on a victim’s system by predicting the 
temporary administration account generated by SUService.exe, as well as allowing a 
local unprivileged attacker to execute commands on users’ Windows systems. 

Source: http://www.securitvweek.com/lenovo-patches-privilege-escalation-flaws- 
system-update 

29. November 24, IDG News Service - (International) Dell security error widens as 
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researchers dig deeper. Researchers from Duo Security discovered that new Dell 
laptops were found with a self-signed root digital certificate, eDellRoot, which can 
allow attackers to conduct a man-in-the-middle attack, spy on incoming data, and use 
private keys to create their own digital certificates to produce fake Web sites that 
appear legitimate. Dell Inc. reported they plan to release instructions on how to remove 
the certificates. 

Source: http://www.computerworld.com/article/3008077/securitv/dell-securitv-error- 
widens-as-researchers-dig-deeper.html#tk.rss security 

30. November 23, Softpedia - (International) ISIS retaliates against Anonymous, leaks 
data of “To-be-killed” US officials. Hackers from the Islamic State Hacking Division 
leaked a list containing data about employees who served on bases located in the 
Middle East, including personnel from the U.S. Defense Intelligence Agency, the FBI, 
the CIA, and the National Counterterrorism Center, the U.S. National Guard, and other 
Federal government agencies, via a Twitter account. The leak was contained. 

Source: http://news.softpedia.com/news/isis-retaliates-against-anonymous-leaks-data- 
of-to-be-killed-us-officials-496593.shtml 



31. November 23, Softpedia - (International) Researchers find multiple Chrome 

extensions secretly tracking users. Researchers from Detectify Fabs discovered that 
Google Chrome extensions including HooverZoom, Speaklt, ProxFlow, Instant 
Translate, and other extensions were embedded with an analytics code to track users’ 
browsing history, collect data from cookies, and view secret access tokens from 
Facebook Connect without users’ consent while surfing across Web sites in different 
browser tabs. 

Source: http://news.softpedia.com/news/researchers-find-multiple-chrome-extensions- 
secretly-tracking-users-496596.shtml 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



Communications Sector 

Nothing to report 

Commercial Facilities Sector 



32. November 24, Austin American-Statesman - (Texas) Fire that displaced 30 at South 
Austin apartments blamed on cigarette. The Retreat at Barton Creek apartment 
complex sustained extensive damage November 24 after a fire damaged 24 units and 
displaced 30 residents. Officials say that the fire was caused by an improperly 
discarded cigarette. 

Source: http://www.statesman.com/news/news/local/firefighters-battling-fire-at-south- 
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austin-apartme/npTnP/ 



33. November 23, U.S. Department of Labor - (Wisconsin) Bloomer, Wisconsin, roofing 
contractor endangers workers, ignores safety regulations. The Occupational and 
Safety Health Administration cited Affordable Exteriors LLC for 2 willful, 1 repeated, 
and 3 serious safety violations November 20 after an investigation revealed that 
employees were working at heights of up to 25 feet without fall protection equipment. 
Proposed fines total $112,200. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=29067 

34. November 23, U.S. Department of Labor - (Georgia) JA Siding Construction 
Services in Georgia exposed workers to dangerous falls and other safety hazards. 
The Occupational and Safety Health Administration cited a man conducting business as 
JA Siding Construction Services LLC November 20 for failing to provide fall 
protection equipment to workers on a scaffold, failing to ensure the scaffold was 
properly secure while workers were exposed to heights ranging from 28-32 feet, and 
for not providing protective eyewear to employees while using a pneumatic nail gun. 
Proposed penalties total $65,120. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=29076 

35. November 23, Milwaukee Journal Sentinel - (Wisconsin) Wilderness resort reports 
credit card data breach. Wisconsin Dells officials reported November 23 that its 
Wilderness Resort’s point-of-sale (PoS) system for processing credit and debit card 
transactions was compromised and may affect guests with reservations from March 9 - 
June 8 after a malware was found in its systems. The malware was removed and the 
resort is offering one year of free credit monitoring to guests who may have been 
affected. 

Source: http://www.isonline.com/business/wildemess-resort-reports-credit-card-data- 
breach-b99621592zl-353041801.html 



For additional stories, see items 8, 24, and 35 



Dams Sector 

Nothing to report 
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NTAS 

NO ACTIVE ALERTS 

www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday 
through Friday] summary of open-source published information concerning significant critical 
infrastructure issues. The DHS Daily Open Source Infrastructure Report is archived for 10 days on 
the Department of Homeland Security Web site: http://www.dhs.gov/lPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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